Privacy Policy

Last updated: 9 May 2026

This Privacy Policy explains how Jokelboard ("Jokelboard", "we", "us", or "our") collects, uses, and protects your personal information when you use our website at jokelboard.com (the "Service").

1. Who we are

Jokelboard is operated by Dylan Wales (Roblox: @dylanjkl), of United Kingdom. The data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 is Dylan Wales (Roblox: @dylanjkl).

You can contact us about anything in this policy at dylanjklroblox@gmail.com.

2. What data we collect

When you sign in to Jokelboard, we collect the following information from Roblox via OAuth 2.0:

• your Roblox user identifier (a stable numeric value);
• your Roblox username;
• your Roblox display name;
• your Roblox profile picture URL.

When you use the Service, we also collect:

• boards, lists, cards, labels, organisations, invitations and any other content you create or modify;
• a strictly necessary session cookie (jb.sid) used to keep you signed in;
• server logs containing your IP address, the time and path of each request, and your user-agent string, retained for security and abuse-prevention purposes.

We do not knowingly collect any other personal information beyond what Roblox provides during sign-in or what you explicitly enter into the Service.

3. Lawful basis for processing

We process your personal data under the following lawful bases (UK GDPR Article 6):

• Performance of a contract (Article 6(1)(b)): to provide you with an account, store and serve the boards you create, and run the Service generally.
• Legitimate interests (Article 6(1)(f)): to operate, secure, monitor, and improve the Service, prevent abuse and fraud, and defend against legal claims. We have weighed our interests against your rights and concluded our processing does not unduly impact you.
• Legal obligation (Article 6(1)(c)): where required by law, court order, or regulatory request.
• Consent (Article 6(1)(a)): where we explicitly ask for it. You can withdraw consent at any time without affecting prior processing.

4. Who we share data with

We share your data only as needed to provide the Service:

• Roblox Corporation — when you sign in, we receive data from Roblox via OAuth 2.0. Roblox's own privacy policy applies to the data they hold about you.
• Hetzner Online GmbH (Germany) — our hosting provider, processing data on our behalf as a sub-processor.
• Cloudflare, Inc. — DNS provider, processing limited connection metadata.
• Law enforcement, regulators, or other third parties — only where we are required by law or believe in good faith that disclosure is necessary to enforce our Terms, prevent fraud, or protect any person from harm.

We do not sell your personal data, share it with advertisers, or use it for behavioural advertising or AI-model training.

5. International transfers

Your data is primarily stored on servers located in Germany (EU). Some data may be transferred to or processed in the United States (Roblox Corporation, Cloudflare). Where we transfer personal data outside the United Kingdom or the European Economic Area, we rely on a UK adequacy regulation, the EU–US Data Privacy Framework, or appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.

6. How long we keep your data

• Account data: for as long as your account is active, plus up to 90 days after deletion to allow for backups and rollback.
• Boards, organisations, and other content: until you delete them, plus a limited period in our backups.
• Server logs: up to 30 days.
• Records related to legal claims, disputes, or regulatory investigations: for the period required by applicable law (typically up to 6 years under UK statute).

7. Your rights under UK GDPR

You have the following statutory rights:

• Right of access — a copy of the personal data we hold about you.
• Right to rectification — correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — deletion of your data, subject to limited legal exceptions.
• Right to restrict processing — pausing certain uses of your data.
• Right to data portability — a copy of your data in a structured, commonly used, machine-readable format.
• Right to object — to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — where processing is based on your consent.
• Right to lodge a complaint with the Information Commissioner's Office.

To exercise any of these rights, email us at dylanjklroblox@gmail.com. We will respond within one month, as required by law. You may also self-serve account deletion via your account settings where available.

8. Children

The Service is not intended for use by children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data without parental consent, please contact us at dylanjklroblox@gmail.com and we will investigate and, where appropriate, delete the data.

Because Roblox is widely used by minors, we strongly recommend that any user under 18 obtain parental or guardian consent before using Jokelboard. By signing in, you represent that you have such consent if it is required by the law of your jurisdiction.

9. Cookies and similar technologies

We use one strictly necessary cookie named jb.sid to keep you signed in. This cookie is essential for the Service to function and does not require consent under the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR).

We do not use third-party tracking, advertising, or analytics cookies as of the date of this policy. If we add any non-essential cookies in the future, we will ask for your consent before setting them.

10. Security

We take reasonable technical and organisational measures to protect your data, including TLS/HTTPS, encryption-in-transit, signed and HttpOnly cookies, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

If you become aware of a security issue, please email dylanjklroblox@gmail.com as soon as possible.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. We will notify you of material changes by posting a notice on the Service or by email.

12. Contact

For all data-protection enquiries:

• Email: dylanjklroblox@gmail.com
• Postal address: United Kingdom

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office:

• Website: https://ico.org.uk
• Phone: 0303 123 1113